package passkey

import (
	"errors"
	"fmt"
	"io/ioutil"
)

// TLSFiles : outputs a cert & key to indicated files for the selected cert from passwordsafe
func (pk *Client) TLSFiles(selector, certFile, keyFile string) error {
	var certBundle, key []byte

	switch selector {
	case "wildcard":
		// *.nsi.rackspace.com from outside vendor
		certBundle = []byte(pk.Keys.WildcardCert.Credential.Password + "\r\n" + pk.Keys.WildcardCABundle.Credential.Password)
		key = []byte(pk.Keys.WildcardKey.Credential.Password)
	default:
		return errors.New("unknown cert")
	}

	if err := ioutil.WriteFile(certFile, certBundle, 0644); err != nil {
		return fmt.Errorf("error creating certificate file: %s", err.Error())
	}
	if err := ioutil.WriteFile(keyFile, key, 0644); err != nil {
		return fmt.Errorf("error creating key file: %s", err.Error())
	}

	return nil
}